How deeply does 100 SQL Server Mistakes and How to Avoid Them cover custom role?

Defines custom server and database roles, shows permission assignments, and cautions against overloading model.

Custom role

As explained in 100 SQL Server Mistakes and How to Avoid Them

A custom role is a user-defined SQL Server role with specifically selected permissions for a required task.

Mistake #1: granting broad fixed-role membership because it seems faster. A custom role assigns only the permissions required for a task, reducing unauthorized changes and operational surprises. section 14.1

A safer operational permission

A failover workflow can use a custom server role with permissions such as CONNECT SQL, VIEW SERVER STATE, and availability-group permissions. A database can instead use an ExecSP role granting EXECUTE without unnecessary database access. section 14.1

Treat role design as an operational safeguard: unplanned elevated access can cause performance or stability problems that the DBA team must investigate. Applying the role in model propagates it to new databases, but increases maintenance responsibility. section 14.1

How 100 SQL Server Mistakes and How to Avoid Them covers it

Cover of 100 SQL Server Mistakes and How to Avoid Them

liveBook manning.com

Read 100 SQL Server Mistakes and How to Avoid Them on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

MongoDB 8.0 in Action, Third EditionA custom role is a database role whose privileges are explicitly defined rather than inherited solely from a built-in role.
liveBook manning.com

Azure SecurityA custom role is an authorization configuration that grants a specifically selected set of permissions to users or other identities.

Compare how 3 books explain custom role →

Related concepts

role-based access controlused by · Role-based access control is an authorization model that assigns permissions to roles and grants users or other principals access through their assigned roles.
rolekind of · A role is a defined function, responsibility, perspective, or set of permissions associated with a participant in an organization or system.
atlas customDbRoles createconfigured by · atlas customDbRoles create is an Atlas CLI command that creates a custom database role with specified privileges.
role configurationkind of · A role configuration specifies a role and its associated responsibilities, permissions, or expected behavior within a system or organization.
role hierarchypart of · A role hierarchy is an ordering of roles that establishes relative authority or precedence, and may determine which permissions or instructions take priority.
scopeconfigured by · Scope is a defined boundary specifying which entities, activities, resources, or conditions are included or governed in a particular context.

This explainer was generated by Manning's knowledge graph from the text of 100 SQL Server Mistakes and How to Avoid Them. The section links point to the parts of the book it draws on.